This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft File: YtA4iKQF5huH0XBvkzs2aob7QpU.mft (raw, json) Hash identifier: k5jo7ql9XxcFbM239k2cm3A7pQOKLBq1h/7thrqRjpQ= Subject key identifier: B3:16:4F:09:BA:87:73:B0:A5:24:70:53:3E:9C:A6:56:94:73:4B:A9 Authority key identifier: 62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95 Certificate issuer: /CN=62d03888a405e61b87d1706f933b366a86fb4295 Certificate serial: 019B4E4DC17BF239779B2C4604360BC05D39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft Manifest number: 077A Signing time: Wed 24 Dec 2025 03:01:17 +0000 Manifest this update: Wed 24 Dec 2025 03:01:17 +0000 Manifest next update: Thu 25 Dec 2025 03:01:17 +0000 Files and hashes: 1: HQp_yUg92FF87DlWPtvQf8oIbtU.roa (hash: WdzVBva5nz5iKOf23yLPoQ+M9QxUiJxb8xYxHWes+RI=) 2: YtA4iKQF5huH0XBvkzs2aob7QpU.crl (hash: 6jIqdM17WpWh6I6zq/rf2mvbvBI71Y1VIeKI/qkpvUI=) 3: zCw-9AZjP26xMi8ifkh6cllXO9s.roa (hash: D1nIK1UZwod09XQftoKXhB7rZyXrZ+n2IZxVQbyl2wc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:c1:7b:f2:39:77:9b:2c:46:04:36:0b:c0:5d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62d03888a405e61b87d1706f933b366a86fb4295 Validity Not Before: Dec 24 03:01:17 2025 GMT Not After : Dec 25 03:01:17 2025 GMT Subject: CN=b3164f09ba8773b0a52470533e9ca65694734ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:db:c4:21:3a:b8:08:af:ed:4b:32:af:f4:5c: 04:80:02:c7:29:4a:96:32:6b:f5:44:70:e9:6a:cf: 2f:26:d5:01:2c:af:c4:1d:ea:b1:ea:3e:1e:26:cf: d0:9d:14:03:4d:79:82:1b:b1:5d:a6:45:ca:b2:fb: d6:a3:5e:de:bc:6d:ea:26:9e:be:33:1a:65:07:c9: 46:a4:fc:9c:3a:ad:10:ce:10:d3:cb:c2:fd:1d:67: 7c:81:b7:20:74:90:c8:d0:32:ee:e2:0f:ba:05:11: 94:6f:a3:dc:47:13:86:b3:fa:a9:f5:77:8b:a3:15: a0:ad:70:b5:6d:00:18:ba:80:15:87:ed:16:af:4c: 48:fa:66:46:60:a6:fd:bb:8b:02:ad:a7:e6:3c:32: 92:59:1b:fd:97:0d:90:b2:6a:f2:d4:a5:f2:cd:4e: 9c:89:63:6c:43:bf:88:e4:e4:06:e8:52:96:dc:a3: 4d:0b:81:d9:d3:07:ee:d9:17:11:25:ec:e1:12:09: 36:7e:64:e3:99:87:58:6b:39:a6:e6:50:ec:07:5a: 53:1c:6e:b0:29:c0:da:73:86:56:f5:7a:40:c2:d0: 02:e1:57:c0:1a:5f:c2:ae:b4:7b:59:8e:17:60:ad: d7:e0:87:7b:6d:2f:1a:a5:94:39:d9:56:65:c8:67: 3c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:16:4F:09:BA:87:73:B0:A5:24:70:53:3E:9C:A6:56:94:73:4B:A9 X509v3 Authority Key Identifier: keyid:62:D0:38:88:A4:05:E6:1B:87:D1:70:6F:93:3B:36:6A:86:FB:42:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtA4iKQF5huH0XBvkzs2aob7QpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bf51ff-5c36-45b2-91c5-4d685aca8279/1/YtA4iKQF5huH0XBvkzs2aob7QpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:53:98:71:62:e1:c2:8e:f0:ab:3d:dc:2a:c6:1d:f2:c3:9c: b5:9a:76:28:a5:24:56:93:ad:ef:ea:f8:79:b6:1a:c1:7b:3d: 0e:77:6f:15:62:77:04:13:54:c5:e0:c0:68:d0:7d:d1:01:c0: d0:73:42:dd:27:d4:b3:45:5a:a1:37:c4:98:1b:96:e0:4f:27: e5:3b:94:7f:e5:7e:8e:e1:38:65:42:f8:9c:5e:d9:c2:b2:2b: 83:95:3d:7b:4b:b3:45:bf:b6:b9:a6:64:f5:ae:34:10:6e:aa: b0:4d:aa:e2:0d:7d:81:94:15:ce:50:ab:3c:13:4d:24:58:9b: 81:83:76:26:f1:eb:c1:d6:23:18:7c:53:3f:ce:73:86:a0:3f: 9e:f3:6a:ec:68:08:23:4f:10:ae:49:9e:bf:3f:f4:54:dd:ab: 21:f0:5d:3b:09:e1:6e:43:d7:39:b2:d1:d7:79:78:1c:eb:c3: 75:90:9f:75:9a:4a:c7:a4:f1:a5:95:3b:c1:a5:e4:aa:e8:18: c5:6d:8f:af:80:fb:d2:ff:4e:54:18:1a:2b:2b:57:d8:39:40: 3b:6c:56:1e:d3:0c:6a:20:dc:83:5e:82:08:87:84:5a:da:16: 3c:12:f6:8f:8c:c7:6b:43:7d:fb:d3:b5:ed:d8:3b:40:5a:0f: 36:e4:6c:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTcF78jl3myxGBDYLwF05MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZDAzODg4YTQwNWU2MWI4N2QxNzA2ZjkzM2IzNjZhODZm YjQyOTUwHhcNMjUxMjI0MDMwMTE3WhcNMjUxMjI1MDMwMTE3WjAzMTEwLwYDVQQD EyhiMzE2NGYwOWJhODc3M2IwYTUyNDcwNTMzZTljYTY1Njk0NzM0YmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndvEITq4CK/tSzKv9FwEgALHKUqW Mmv1RHDpas8vJtUBLK/EHeqx6j4eJs/QnRQDTXmCG7FdpkXKsvvWo17evG3qJp6+ MxplB8lGpPycOq0QzhDTy8L9HWd8gbcgdJDI0DLu4g+6BRGUb6PcRxOGs/qp9XeL oxWgrXC1bQAYuoAVh+0Wr0xI+mZGYKb9u4sCrafmPDKSWRv9lw2Qsmry1KXyzU6c iWNsQ7+I5OQG6FKW3KNNC4HZ0wfu2RcRJezhEgk2fmTjmYdYazmm5lDsB1pTHG6w KcDac4ZW9XpAwtAC4VfAGl/CrrR7WY4XYK3X4Id7bS8apZQ52VZlyGc8IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLMWTwm6h3OwpSRwUz6cplaUc0upMB8GA1UdIwQY MBaAFGLQOIikBeYbh9Fwb5M7NmqG+0KVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXRBNGlLUUY1aHVIMFhCdmt6czJhb2I3UXBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iZjUxZmYtNWMzNi00NWIyLTkxYzUt NGQ2ODVhY2E4Mjc5LzEvWXRBNGlLUUY1aHVIMFhCdmt6czJhb2I3UXBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9iZjUxZmYtNWMzNi00NWIyLTkxYzUtNGQ2ODVhY2E4Mjc5 LzEvWXRBNGlLUUY1aHVIMFhCdmt6czJhb2I3UXBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKVOYcWLh wo7wqz3cKsYd8sOctZp2KKUkVpOt7+r4ebYawXs9DndvFWJ3BBNUxeDAaNB90QHA 0HNC3SfUs0VaoTfEmBuW4E8n5TuUf+V+juE4ZUL4nF7ZwrIrg5U9e0uzRb+2uaZk 9a40EG6qsE2q4g19gZQVzlCrPBNNJFibgYN2JvHrwdYjGHxTP85zhqA/nvNq7GgI I08Qrkmevz/0VN2rIfBdOwnhbkPXObLR13l4HOvDdZCfdZpKx6TxpZU7waXkqugY xW2Pr4D70v9OVBgaKytX2DlAO2xWHtMMaiDcg16CCIeEWtoWPBL2j4zHa0N9+9O1 7dg7QFoPNuRsyw== -----END CERTIFICATE-----Generated at Wed Dec 24 04:47:35 2025 by rpki-client